Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
File:                     Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft (raw, json)
Hash identifier:          JvjcXpBHWP8M5SMOcaxVyS5C+YZq0w0at7Bjc2I0884=
Subject key identifier:   29:67:1B:6C:DB:46:5F:7B:0B:BC:1F:43:1A:F8:DF:F5:89:CF:DD:61
Authority key identifier: 1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D
Certificate issuer:       /CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
Certificate serial:       01962F3D8F36959281DFC1ECAD2CE8190E33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl (hash: sZPzZq7cOvktH/mVsUzKGP5CerE283FKEMa9Ai8djIg=)
                          2: Z0_nKn5Ppf7O_xlPG_HQgKTjKfg.roa (hash: lqxBjj1kSi94JV6i0p7bCeDB9JZ982zRhs/Zft9BEa8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:8f:36:95:92:81:df:c1:ec:ad:2c:e8:19:0e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a7d610942d4d9f96d5731b9538fd4c78ba0f20d
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=29671b6cdb465f7b0bbc1f431af8dff589cfdd61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:be:43:79:a7:1e:3f:18:21:c4:3b:7b:26:
                    d7:13:f7:6f:82:2c:cc:ca:81:d2:b9:9e:21:e1:76:
                    aa:7f:09:62:cf:8a:11:22:48:03:87:af:73:65:f5:
                    7f:df:1c:62:73:90:cd:d0:27:a5:b2:7a:88:6a:36:
                    d2:aa:72:44:02:f5:10:f0:3a:aa:f8:8b:df:24:c5:
                    83:d4:ec:78:cf:0a:40:7a:71:6c:89:26:1b:41:1e:
                    d7:ba:78:1c:e9:1a:9c:ab:36:81:7d:45:6a:69:f7:
                    9f:6f:f7:7c:22:54:c9:63:c1:63:58:b0:d9:8b:80:
                    4f:ac:4d:08:32:2d:65:81:d1:2c:17:6c:e8:26:5b:
                    f3:0c:3b:dc:ff:69:4a:8b:c3:b1:b3:6b:e0:7d:c1:
                    28:bb:fa:b8:d8:81:28:bd:d7:52:4a:da:81:1d:66:
                    e5:93:9d:97:88:08:7e:63:3a:1e:b6:68:25:b1:f9:
                    3f:cd:3d:ff:11:65:a8:e6:2a:b6:de:e0:38:a6:f2:
                    ec:1e:31:80:0a:1a:ee:f3:19:69:e8:db:9f:e6:f5:
                    c1:99:2e:fd:54:2a:03:85:6f:43:ea:22:78:c4:fb:
                    b8:89:af:05:08:79:6c:9c:f0:00:87:89:b6:8a:79:
                    97:07:9a:9d:96:6b:8b:09:e8:83:19:be:28:e0:85:
                    a0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:67:1B:6C:DB:46:5F:7B:0B:BC:1F:43:1A:F8:DF:F5:89:CF:DD:61
            X509v3 Authority Key Identifier:
                keyid:1A:7D:61:09:42:D4:D9:F9:6D:57:31:B9:53:8F:D4:C7:8B:A0:F2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn1hCULU2fltVzG5U4_Ux4ug8g0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/37aedf-5bc0-40d5-84cc-00b0137f29ff/1/Gn1hCULU2fltVzG5U4_Ux4ug8g0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:8e:e4:9a:f7:9f:28:50:3d:5f:90:b4:1d:29:11:6c:b3:f0:
         d1:a0:5a:b7:56:80:48:80:7e:45:77:25:5c:ab:8e:0a:53:09:
         11:6f:71:e9:21:db:19:5b:dc:7b:6e:de:95:2b:02:b3:10:e5:
         a8:99:f9:6d:01:93:4f:48:b1:d7:db:13:94:b0:06:f3:e3:81:
         ef:82:fb:4d:3e:c2:a4:e3:40:57:75:f6:c5:79:92:39:48:0d:
         b0:f7:4c:38:5f:31:74:b9:8f:50:60:fc:b6:7f:51:13:9c:c6:
         ff:c5:7e:09:d5:93:19:61:e0:1a:c8:16:5e:dc:17:d3:c9:d4:
         ab:a0:f7:1a:76:f1:12:07:84:18:f1:01:e2:d3:ef:ae:f6:08:
         a6:48:e8:13:3b:d4:87:f4:e6:49:23:5b:ec:32:10:62:e2:49:
         65:b8:0b:b6:7f:27:b8:19:b5:ba:2c:eb:24:f8:8b:ea:99:4d:
         d8:e9:9c:20:97:eb:34:b4:c5:a6:9a:d7:b1:a6:45:8d:36:f3:
         9a:40:80:f2:f7:0f:ba:8e:34:01:73:0b:6a:b0:70:5e:60:f4:
         c8:0b:25:67:1a:ca:5f:9d:1a:f3:62:d1:b0:77:b1:04:b1:4f:
         b1:1a:8d:ed:2c:1d:88:81:26:18:a7:e9:de:13:f8:0a:05:ed:
         22:03:cc:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----